Labour Law Compliance Checklist for Employers in India

1. Executive Answers

What does an audit-ready employer look like? Every establishment has a current registration, payroll computed on the Code definition of wages, statutory remittances matched to deductions, contractors verified before they start work, and records that an inspector can retrieve within hours. Anything short of that is documentable exposure.

Core accountability vectors

1. Wage base integrity. Excluded allowances above 50% of total remuneration are added back to wages. Errors flow into PF, gratuity, bonus, overtime and exit settlements.
2. Remittance discipline. PF and ESI are due by the 15th of the following month. Deducting employee contributions and not depositing them is the most serious category of default.
3. Principal employer liability. Wage, social security and welfare defaults by contractors fall back on you, and engaging an unlicensed contractor is an independent contravention.
4. Workplace mandates. Appointment letters, hours and overtime limits, safety committees where prescribed, health check-ups, Grievance Redressal Committee (20+ workers) and POSH Internal Committee (10+ employees).
5. Exit timelines. Wages and dues on separation are payable within two working days.

Recommended audit cycles

Direct risk exposure points: underpaid statutory bases, unremitted deductions, unlicensed contractors, missing POSH committee or annual report, absent or unlinked State registrations, and stale policies and appointment letters that cite repealed Acts.

2. Scope & Applicability

2.1 Headcount thresholds

2.2 Entity classifications

• Factories: carry the heaviest obligations, including safety officers and committees at prescribed thresholds, hazard controls, and incident notification.
• Commercial establishments (shops, offices, retail, hospitality): governed by the OSHWC Code and State Shops and Establishments Acts or their successors; State rules set hours, opening and closing, weekly off and registration.
• IT/ITeS units: several States grant conditional exemptions or special rules on working hours, night shifts and registers. Exemptions are State-specific and depend on conditions (such as consent, transport and safety for women on night shifts), so do not assume a blanket exemption.
• Contractor-run and gig/platform operations: contract labour provisions apply to engaged contract workers. Gig and platform workers are covered through the Social Security Code's aggregator provisions.

2.3 Geography and multi-state triggers

• The State Government is the appropriate government for most private-sector establishments. The Central Government is the appropriate government for specified sectors such as railways, mines, major ports, banking, insurance, and certain central entities.
• Each location is a separate compliance unit. Registration, State levies (Professional Tax, Labour Welfare Fund), inspection regimes, overtime caps and shop timings follow the State of the establishment.
• Inter-state triggers: employing 10 or more inter-state migrant workers, deploying contractors across State lines, or posting employees to another State (which can create a new registration at the worksite) each add obligations.
• Entity-wise registers: each legal entity, even within a group, files and registers separately. Shared service arrangements do not merge compliance identities.

3. Detailed Guide

3.1 Wage Structure and the 50% Rule

• Included in wages: basic pay, dearness allowance, retaining allowance.
• Excluded (subject to the cap): HRA, conveyance, statutory bonus, employer PF contribution, gratuity, overtime, commission, and similar items specified in the Code.
• The rule: if excluded components exceed 50% of total remuneration, the excess is added back to wages. The Ministry has clarified that this definition applies across all four Codes.
• Worked illustration: total monthly remuneration of Rs 100,000 with basic Rs 35,000 and allowances Rs 65,000 gives a 50% cap on exclusions of Rs 50,000. Rs 15,000 is added back, so Code wages are Rs 50,000, not Rs 35,000. PF base, gratuity, overtime hourly rate and bonus base change accordingly.
• Verification points: salary structure per band, offer letter wording, payroll configuration, PF wage ceiling treatment, gratuity provision calculation, overtime hourly rate formula (monthly wages converted using the Central Rules method), and full-and-final settlement tool.
• Payment timelines: monthly wages by the 7th of the following month; weekly and daily patterns as per the Code; dues on separation within two working days.
• Deductions: authorised deductions only, within the aggregate cap; maintain deduction register and employee consent where required.
• Documents: electronic wage slips for each pay cycle, wage register, overtime and advances registers, annual return.

3.2 Social Security Remittances

EPF (20+ employees)

• 12% employer and 12% employee on PF wages. Ceiling for mandatory contribution is Rs 15,000 per month; contributions above the ceiling are by option.
• Pay and file the ECR by the 15th of the following month. Verify UAN activation, KYC seeding, nominations, and exit date updates.
• Reconcile payroll, ECR and challan every month. Track notices, damages and interest.

ESIC (10+ employees; wages up to Rs 21,000)

• Employer 3.25% and employee 0.75% of wages. Pay by the 15th of the following month.
• Register employees from the date of joining, maintain accident and sickness records, and track coverage as wages cross the ceiling mid-period.

Gratuity (10+ employees)

• 15 days' wages per completed year after five years of continuous service for permanent employees. Fixed-term employees accrue pro rata after one year of service. Align contract language and provisioning with the Central Rules and current Government clarifications, since the Social Security Code and the IR Code are drafted differently on this point.
• Payment within 30 days of the amount becoming due. Statutory maximum applies for tax exemption purposes; confirm the current ceiling in your computation.
• Maintain nomination forms, service-year register and an actuarial or fund-based provision.

Statutory bonus (20+ employees)

• 8.33% to 20% of eligible wages for employees within the earnings ceiling. Pay within eight months of financial year-end, and record the computation.

Maternity benefit

• 26 weeks' paid leave for the first two children, with creche and work-from-home provisions at prescribed establishment sizes. Verify policy, payroll treatment and returns to work.

3.3 Working Hours and Overtime Protocols

• Limits: 8 hours per day and 48 hours per week, with prescribed rest intervals and spread-over. Weekly off per State rules.
• Overtime: requires employee consent, is paid at not less than twice the normal rate, and is capped per quarter as set by State rules (some States prescribe higher caps than others).
• Women on night shifts: permitted with written consent and safeguards (transport, security, lighting, CCTV or equivalent, grievance channel). Maintain consent forms and transport logs.
• Evidence: biometric or system attendance, shift rosters, overtime approvals, and overtime pay register reconcilable to payroll.
• Common audit sample: compare attendance exports with overtime payments for the highest-hours departments, and look for pay-for-hours mismatches.
• Appointment letters: every worker must receive one, stating designation, wages, hours, social security coverage and conditions of service. Verify issuance at joining and for existing staff.
• Health check-ups: provide the annual free health check-up to workers above the age prescribed in the Rules, and retain records.

3.4 Vendor and Contract Labour Governance

• Core-activity prohibition: contract labour is prohibited in core activities, with defined exceptions. Maintain a written work classification (core vs non-core) approved by Legal.
• Licence verification: collect the contractor licence, scope, validity, and worker-number limits before onboarding; re-verify quarterly.
• Principal employer registration: where 50 or more contract workers are engaged, hold the required principal employer registration under the OSHWC framework.
• Monthly proof of compliance from every contractor: wage register or bank-paid wage proof, PF ECR and challan, ESI challan, bonus and leave records, and statutory returns.
• Contract clauses: audit rights, payment-holdback until proof is received, indemnity, set-off, replacement of non-compliant contractors, and termination for default.
• Direct payment fallback: where a contractor defaults on wages, the principal employer pays and recovers from the contractor, so reserve rights in the agreement.
• Worker records: headcount, deployment area, and entry-exit logs matched to contractor wage proof.

3.5 POSH Mandates

• Internal Committee (10+ employees at a workplace): presiding officer (a senior woman), at least two employee members committed to women's causes or with relevant experience, and one external member from an NGO or with legal knowledge. Majority of members must be women. Constitute for each office or administrative unit.
• Policy and display: a written policy, display of the penal consequences and committee details at the workplace, and communication to every employee.
• Training and awareness: periodic employee orientation and IC member training. Keep attendance and content records.
• Complaint process: complaints within three months of the incident (extendable by the committee in specified cases); conciliation only at the complainant's request; inquiry completed within 90 days; employer acts on the report within 60 days.
• Annual report: the IC prepares an annual report on complaints and disposals, submitted to the employer and the District Officer, and the number of cases is disclosed in the company's annual report where required.
• Penalty exposure: non-compliance carries a fine of up to Rs 50,000, with higher penalty and possible cancellation of licence or registration on repeat.

4. Table / Checklist

Audit matrix

Pre-inspection readiness checklist

• Registration certificates, licences and nominations for every location in one file
• Last 36 months of ECR, challans and payroll reconciliations
• Contractor licence register with expiry alerts
• Wage, attendance and overtime registers retrievable by employee and month
• POSH IC order, annual report and training records
• Safety committee minutes, incident logs and health check-up records
• Policy set aligned to Code terminology
• Named compliance owner for each State

5. Common Mistakes

1. Miscalculating the wage definition. Testing the 50% rule on basic pay alone, or on CTC without separating employer-side components, leads to wrong PF, gratuity and overtime bases. Ramifications: recovery of shortfalls with interest and damages, fines for wage and social security contraventions, and individual employee claims at exit.
2. Failing to secure principal employer registration. Engaging 50 or more contract workers without the required registration, or using contractors whose licence does not cover the work or location. Ramifications: penalties under the OSHWC Code, and wage and welfare liability on the principal employer.
3. Accepting contractor invoices without compliance proof. Paying vendors with no wage, ECR or challan evidence. Ramifications: the principal employer pays defaulted wages and contributions, with recovery depending on contract rights you may not have reserved.
4. Delayed statutory filings and remittances. Late PF, ESI, Professional Tax, Labour Welfare Fund or annual returns. Ramifications: interest, damages, late fees, assessment notices, and prosecution for aggravated cases such as deduct-and-not-deposit.
5. Core-activity contracting. Staffing production, operations or customer-facing core roles through contractors without applying the exceptions. Ramifications: licence-related penalties, and risk that workers claim direct employment.
6. Informal or missing records. Spreadsheet-only attendance, unsigned registers, or records that cannot be reconciled to payroll. Ramifications: adverse inference during inspection, fines per contravention, and inability to defend wage claims.
7. Applying one national policy across States. Ignoring State overtime caps, weekly-off rules, shop timings, Professional Tax and LWF. Ramifications: State-level notices and fines outside Central compliance reviews.
8. Missing POSH architecture. No Internal Committee for an office, an expired committee tenure, no external member, or no annual report to the District Officer. Ramifications: fines and enhanced penalties on repeat, and weak defence in any complaint litigation.
9. Slow exit settlements. Running full-and-final on a 30 to 45 day cycle. Ramifications: breach of the two-working-day rule, wage claims and penalty exposure.
10. Stale documents. Appointment letters, policies, registers and returns citing repealed Acts. Ramifications: mismatch findings in inspections and weaker position in disputes.

6. Action Plan: 30-60-90 Day Internal Audit Blueprint

The objective is to convert unstructured payroll and HR data into a verified, documented and monitored compliance file.

Days 1-30: Data consolidation and baseline

1. Build the establishment master: entity, location, State, headcount by category (employee, fixed-term, contract, gig), and applicable thresholds from Section 2.
2. Collect source data: 36 months of payroll registers, ECR and ESI files, challans, attendance and overtime exports, contractor invoices and licences, offer letters, and policies.
3. Create the registration inventory with certificate numbers, validity and owner.
4. Run the wage definition test by salary band, and quantify the impact on PF, gratuity, bonus and overtime.
5. Reconcile deductions to deposits and flag any deduct-and-not-deposit item for immediate correction.
6. Triage: classify findings as critical (unremitted deductions, unlicensed contractors, missing registrations), major, or minor.

Days 31-60: Remediation and documentation

1. Close critical findings first: deposit shortfalls, obtain licences and registrations, replace non-compliant vendors.
2. Reissue documents: appointment letters, fixed-term contracts, contractor agreements and policies in Code terminology.
3. Reset payroll configuration: wage definition, overtime formula, exit settlement timeline, and statutory challan automation.
4. Constitute committees: POSH Internal Committee, Grievance Redressal Committee, and safety committee where applicable, with minutes and training records.
5. Digitise registers with employee-level and month-level retrieval and an audit trail.
6. Contractor onboarding gate: no work starts without licence and scope verification, and no invoice is paid without monthly proof.

Days 61-90: Validation and monitoring

1. Compliance calendar by State and entity with named owners and escalation.
2. Monthly controls: payroll-to-challan reconciliation, contractor proof checklist, overtime cap monitor.
3. Retention and access policy: retention period at the longest applicable period, with role-based access and backup.
4. Mock inspection: test whether each item in the pre-inspection readiness list can be produced within a defined time.
5. Leadership report: open gaps, quantified exposure, remediation status and next-quarter plan.
6. Independent verification of closure before the next audit cycle.

Frequently asked questions